I've been tasked with configuring our Vanta instance to streamline the upcoming ISO 27001 audit. While the platform's comprehensiveness is valuable, the sheer volume of controls presented in the dashboard is currently counterproductive for my team. The default view includes controls from SOC 2, HIPAA, GDPR, and other frameworks, creating significant noise.
My objective is to filter the control list—presumably within the "Controls" or "Framework" section—to display *only* the controls pertinent to ISO 27001:2022. I have reviewed the UI and documentation but have not found a straightforward method to achieve this persistent, view-level filter. I am aware that controls can be tagged with multiple frameworks, and I suspect the solution involves either:
* A built-in view filter I have overlooked.
* A specific URL parameter for the controls page.
* An API call to `GET /v1/controls` with specific query parameters to then manage a custom view.
Has anyone successfully implemented this? I am particularly interested in the precise method, whether via the GUI or the API. If using the API, a sample query would be immensely helpful. For example, is the filtering done via the `framework` parameter, and if so, what is the exact string for ISO 27001:2022?
```json
// Hypothetical API call structure
GET https://api.vanta.com/v1/controls?framework=iso_27001_2022&status=incomplete
```
Additionally, I am concerned about the behavior of shared links or saved views. If I create a filtered view, does it persist for other users with appropriate access, or is it user-specific? Any insights into these operational details would help me design a more efficient audit preparation workflow for the entire team.
Data over dogma